# Logstash stops automatically with an error

**URL:** <https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774>\
**Category:** Logstash\
**Created:** [March 8, 2016, 1:19pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774 "2016-03-08T13:19:05Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 8, 2016, 1:19pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/1 "2016-03-08T13:19:05Z")

</div>

Hi Experts,

My logstash1.5.4 stops working with the flowing error . Please help me to resolve and understand this issue .

`{:timestamp=>"2016-03-08T17:01:33.421000+0530", :message=>"Failed to flush outgoing items", :outgoing_count=>1, :exception=>"Manticore::ClientProtocolException", :backtrace=>["/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:35:in`initialize'", "org/jruby/RubyProc.java:271:in `call'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:70:in`call'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:245:in `call_once'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:148:in`code'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/http/manticore.rb:71:in `perform_request'", "org/jruby/RubyProc.java:271:in`call'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/base.rb:190:in `perform_request'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/http/manticore.rb:54:in`perform\_request'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/client.rb:119:in `perform_request'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-api-1.0.12/lib/elasticsearch/api/actions/bulk.rb:80:in`bulk'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch/protocol.rb:104:in `bulk'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:542:in`submit'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:541:in `submit'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:566:in`flush'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:565:in `flush'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:219:in`buffer\_flush'", "org/jruby/RubyHash.java:1341:in `each'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:216:in`buffer\_flush'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:193:in `buffer_flush'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:159:in`buffer\_receive'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:531:in `receive'", "/opt/ls/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/outputs/base.logstash@ETAGSOCVPELKLS01:/opt/ls/logstash-1.5.4/bin$`

Thanks  
VG

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 8, 2016, 1:21pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/2 "2016-03-08T13:21:29Z")

</div>

Please show your Logstash configuration.

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 8, 2016, 1:23pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/3 "2016-03-08T13:23:52Z")

</div>

Here is my config  
input {  
file {  
type =\> "cef"  
path =\> "home/\*.log"  
start\_position =\> "beginning"  
sincedb\_path =\> "home/sincedb"  
}  
}  
filter {  
.......................  
.....................  
.................  
}  
output {  
if [type] == "cef" {  
elasticsearch {  
protocol =\> "http"  
action =\> "index"  
host =\> "hostname:20002"  
index =\> "cef-%{[@metadata][now]}"  
workers =\> 4  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 8, 2016, 1:29pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/4 "2016-03-08T13:29:13Z")

</div>

Okay, nothing unusual there. You haven't enabled HTTPS on port 9200 have you?

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 8, 2016, 1:31pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/5 "2016-03-08T13:31:59Z")

</div>

Hmm, So I am using another port , so it is not 9200 and it is open . LS was working fine from last 4 days , but it stopped today with this error . So is it something related to port ? I mean we get this error when communication breaks ?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 8, 2016, 1:48pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/6 "2016-03-08T13:48:11Z")

</div>

You're _not_ using port 9200? Then you have to configure Logstash accordingly.

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 8, 2016, 3:32pm UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/7 "2016-03-08T15:32:00Z")

</div>

@magnusbaeck Sorry I did not mention , so in the output plugin i am using **host =\> "host:20002"** , So 20002 is the port I am hitting to .So what could be the problem ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:07am UTC](https://discuss.elastic.co/t/logstash-stops-automatically-with-an-error/43774/8 "2017-07-06T05:07:57Z")

</div>


